Notice under the GDPR

Privacy notice

Last updated: 25 August 2026

This notice explains how personal data is processed when visiting the La Bianca Contea holiday rental website. The website is provided for information only and redirects visitors to Airbnb for availability, communications and bookings.

1. Data controller

2. Data processed

During normal browsing, the systems used to provide the website may automatically process technical data such as the IP address, date and time of the request, requested page, response status and information about the browser and device. This data is necessary to transmit the pages correctly and protect the service.

The website has no contact forms, restricted areas, newsletters or direct booking systems. If a visitor chooses to write to the email address shown above, the data included in the message is used solely to reply to the request.

3. Purposes and legal bases

• providing the website and ensuring its security, integrity and correct operation, based on the controller's legitimate interest;
• replying to requests voluntarily sent by email and taking any pre-contractual steps requested by the data subject;
• complying with legal obligations or lawful requests from public authorities.

4. Cookies and tracking technologies

The website does not use profiling or marketing cookies, advertising pixels, behavioural analytics or other non-essential tracking technologies. Netlify Web Analytics and Real User Monitoring are not enabled. A cookie consent banner is therefore not required. Any strictly technical mechanisms may be used solely to deliver and protect the service.

5. Hosting and recipients

The website is hosted by Netlify, Inc., which provides the technical infrastructure required for publication and acts as a data processor for processing carried out on the controller's behalf. Netlify may process technical data connected with access requests. Data may also be disclosed to other strictly necessary technical providers or to public authorities where required by law. It is not sold or used by the controller for profiling or advertising.

Netlify and some of its sub-processors may process data outside the European Economic Area. For transfers governed by the GDPR, the Netlify Data Processing Agreement provides for the European Commission's Standard Contractual Clauses where required. The current list of sub-processors and their countries is available on the sub-processors page. Further details are available in Netlify's privacy statement and its data protection page.

6. Retention

Technical data is retained only for as long as needed to provide, secure and protect the website, in accordance with the hosting provider's applicable settings and retention periods. Email messages are retained for as long as needed to handle the request and, where relevant, the pre-contractual relationship or legal obligations.

7. Links to external services

The website contains ordinary links to Airbnb, Instagram, Google Maps and Apple Maps, but does not embed content from those services. Browsing data is sent to an external service only when the visitor chooses to select the relevant link and leaves this website.

Communications, availability and bookings made through Airbnb are governed by Airbnb's privacy policy. Map services are governed by the privacy policies of Google and Apple. Viewing the social profile is governed by Instagram's privacy policy. All of these act as independent controllers for their respective services.

8. Data subject rights

Where provided for by Regulation (EU) 2016/679, data subjects may request access to their personal data, rectification, erasure, restriction of processing or portability and may object to processing based on legitimate interests. Requests can be sent to the controller using the email address shown above.

Data subjects may also lodge a complaint with the Italian Data Protection Authority or, where applicable, the supervisory authority of the EU or EEA country in which they habitually reside or work or where the alleged infringement occurred.

9. Nature of providing data

Technical browsing data is processed automatically and is necessary to make the website available and secure. Sending an email is optional; if the information needed to handle the request is not provided, the controller will only be unable to reply.

10. Automated decision-making

The controller does not carry out profiling or make decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject.

11. Updates

This notice may be updated when the website's features, service providers or legal requirements change. The latest revision date is shown at the top of the page.